$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: qIbLZgDBsOxYR/eVrJMyPO699jgSRY8/PthY/OnFeNc= Subject key identifier: 0F:1A:1A:EC:61:0B:8B:A7:BA:47:9E:D9:B9:1E:B3:CA:A6:6A:F7:F9 Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 0603DD0D471D32ECF4008C4E790D30927B15D8F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: B5 Signing time: Sat 28 Jun 2025 01:21:09 +0000 Manifest this update: Sat 28 Jun 2025 01:16:09 +0000 Manifest next update: Tue 01 Jul 2025 13:16:09 +0000 Files and hashes: 1: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=) 2: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: cnfqzIwy2kPM2UTdVgIc0WYyb6nbKReGmsX/l8rp48Q=) 3: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=) 4: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 13:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:03:dd:0d:47:1d:32:ec:f4:00:8c:4e:79:0d:30:92:7b:15:d8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Jun 28 01:16:09 2025 GMT Not After : Jul 1 13:16:09 2025 GMT Subject: CN=0F1A1AEC610B8BA7BA479ED9B91EB3CAA66AF7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:1e:f1:b4:3c:98:36:0c:4c:33:42:53:b6: a8:c1:83:15:52:59:d7:61:79:ef:a7:87:27:af:a2: d2:6b:75:8b:72:8b:f2:37:ab:84:7c:dc:9c:ed:a8: 20:46:4d:12:4c:52:ba:f7:a5:02:c5:9f:7f:aa:3b: 87:3c:a1:05:2c:69:37:97:28:7c:3f:be:c2:0b:70: 82:45:d4:1f:b1:67:5e:de:8d:43:79:32:44:8f:c9: 18:63:5d:36:b2:e6:b8:28:ac:a8:0e:50:2e:85:2c: e4:c0:aa:0e:65:fb:37:23:f5:a7:40:c8:1e:06:dc: 9c:30:dc:67:66:cf:22:8c:74:08:11:c1:22:d1:ee: 41:5d:7c:04:0a:0f:23:05:8e:5a:88:31:c5:ca:ee: e6:a7:c2:7c:94:54:d0:b3:77:30:cf:11:83:9b:03: 52:84:a0:18:ab:fb:ec:40:f6:6f:2b:4e:29:78:09: c9:e9:8b:29:c1:41:3b:d4:31:22:cd:2d:28:15:f6: c5:c6:65:f7:eb:30:12:a4:fd:44:4b:da:3e:e1:36: cd:c6:68:05:4e:a0:7b:44:1c:20:b1:8f:81:b5:32: 89:c3:63:06:d3:98:99:95:8a:db:67:a8:9c:2b:4d: 58:a7:14:31:d5:fa:b1:c2:8a:08:a7:30:ec:94:4f: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1A:1A:EC:61:0B:8B:A7:BA:47:9E:D9:B9:1E:B3:CA:A6:6A:F7:F9 X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:ef:77:bb:4a:5b:3b:ab:fe:c0:2f:81:c2:15:f6:d7:b8:82: b3:20:c0:8a:88:28:ae:b7:74:36:0d:33:75:6e:ee:0c:a3:4e: 48:a1:bd:22:ef:d1:16:16:fa:d4:bc:f9:22:8e:9c:f2:77:4a: 04:cf:a3:d8:de:40:0c:8a:cd:fc:5a:2c:0c:8d:a8:f4:ab:92: 29:53:16:57:b4:0f:9f:d9:08:cb:58:ad:86:5c:03:8e:08:38: b7:8b:eb:7d:0d:19:87:c0:a7:e4:50:c9:f8:37:64:bd:c2:e9: 98:61:43:2e:68:07:55:5a:ab:f0:85:47:ab:54:0a:a2:2a:f3: 72:9c:7c:17:98:b4:07:f6:2a:8b:5a:b4:1e:3f:c0:67:ca:9d: 0d:f7:21:c1:00:36:7f:03:db:bb:9a:ab:08:f1:df:ce:f7:94: 38:e3:24:e2:22:d0:56:54:22:0d:42:f6:26:94:84:3b:1b:7d: ed:da:50:3a:cb:7d:9c:ff:08:61:d0:a5:ec:61:b6:8e:b6:25: 02:fe:eb:1d:cd:07:fa:17:3a:a6:70:ed:62:3d:74:48:e6:dd: 05:6f:58:7d:74:c3:f1:f5:33:97:01:9a:44:2e:38:94:a8:5d: 98:1f:ea:32:e1:3f:62:10:e0:c5:85:72:8b:3b:80:fb:fc:2f: 74:f9:2e:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgPdDUcdMuz0AIxOeQ0wknsV2PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNTA2MjgwMTE2MDlaFw0yNTA3MDExMzE2MDlaMDMxMTAvBgNV BAMTKDBGMUExQUVDNjEwQjhCQTdCQTQ3OUVEOUI5MUVCM0NBQTY2QUY3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfR7xtDyYNgxMM0JTtqjBgxVS Wddhee+nhyevotJrdYtyi/I3q4R83JztqCBGTRJMUrr3pQLFn3+qO4c8oQUsaTeX KHw/vsILcIJF1B+xZ17ejUN5MkSPyRhjXTay5rgorKgOUC6FLOTAqg5l+zcj9adA yB4G3Jww3GdmzyKMdAgRwSLR7kFdfAQKDyMFjlqIMcXK7uanwnyUVNCzdzDPEYOb A1KEoBir++xA9m8rTil4CcnpiynBQTvUMSLNLSgV9sXGZffrMBKk/URL2j7hNs3G aAVOoHtEHCCxj4G1MonDYwbTmJmVittnqJwrTVinFDHV+rHCiginMOyUTwYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDxoa7GELi6e6R57ZuR6zyqZq9/kwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANnvd7tKWzur/sAvgcIV9te4grMgwIqIKK63 dDYNM3Vu7gyjTkihvSLv0RYW+tS8+SKOnPJ3SgTPo9jeQAyKzfxaLAyNqPSrkilT Fle0D5/ZCMtYrYZcA44IOLeL630NGYfAp+RQyfg3ZL3C6ZhhQy5oB1Vaq/CFR6tU CqIq83KcfBeYtAf2KotatB4/wGfKnQ33IcEANn8D27uaqwjx3873lDjjJOIi0FZU Ig1C9iaUhDsbfe3aUDrLfZz/CGHQpexhto62JQL+6x3NB/oXOqZw7WI9dEjm3QVv WH10w/H1M5cBmkQuOJSoXZgf6jLhP2IQ4MWFcos7gPv8L3T5Lvg= -----END CERTIFICATE-----Generated at Mon Jun 30 10:23:32 2025 by rpki-client